DETAILS[.]r11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DETAILS.r11
Size

1018KB
MD5

b66b8e8f6d775b5622aee21379600249
SHA1

e9a3bfbcaa862e3355d8f1303976848634f3af01
SHA256

bddb9bd4905feb7a8dc6d190b1bf1253bb7c7d182a4044b1aa0bb6e03fe2feb9
SHA512

25fbbcb5b47b2c1aeb69cf1a2c2f8f2dcd9e2a12b0633976eb337f1c40ea31bd269d541ded3be094283d5e02b6c5e2b05ee5663dec3714b9046f6d68a37d5099
SSDEEP

24576:WLbwzmXr694B86jo2ulv5c/UE2ZZI34mk+RMuZTp0EwzSIRm:JsY4Bjo2WhEVkQBp0Ez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7sscy0gV8pK0QaY.exe

Files

DETAILS.r11
.rar
7sscy0gV8pK0QaY.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DhxS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ